python-urwid security update

2.5.3-5 - Use secure random session identifiers...

PT-2026-80852

The Mercado Pago Node.js SDK interpolates caller-supplied identifiers into API request paths without percent-encoding them, so characters that are structural in a URL survive into the outgoing request. The payment get, capture, cancel, paymentRefund create, total, list, get, advancedPayment get,...

python-urwid security update

1.3.1-5 - Use secure random session identifiers in web display CVE-2026-9323 - Resolves: RHEL-212562...

CVE-2014-0225

CVE-2014-0225...

ROOT-OS-DEBIAN-11-CVE-2026-45997 CVE-2026-45997 in linux - Patched by Root

Root has patched CVE-2026-45997 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-38226 CVE-2025-38226 in linux - Patched by Root

Root has patched CVE-2025-38226 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-23141 CVE-2025-23141 in linux - Patched by Root

Root has patched CVE-2025-23141 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-40080 CVE-2025-40080 in linux - Patched by Root

Root has patched CVE-2025-40080 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-38416 CVE-2025-38416 in linux - Patched by Root

Root has patched CVE-2025-38416 in the linux package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-31416 CVE-2026-31416 in linux - Patched by Root

Root has patched CVE-2026-31416 in the linux package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-74664

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reallocate update replies for mismatched IDs ovsflowcmdnew preallocates the optional reply skb before it takes ovsmutex and before it knows which existing flow will be updated. That is normally fine because the...

GHSA-8GQ3-VP5J-2GRP

creationtimestamp| type| source ---|---|--- 2026-08-22 01:32:06+00:00| seen| https://gist.github.com/alon710/1b32b1920b2d1520540a780d7d0490bd...

GHSA-2943-5XFG-GQ5F

creationtimestamp| type| source ---|---|--- 2026-08-21 21:32:06+00:00| seen| https://gist.github.com/alon710/c3aaed90ea510257bc4b82da4dd81787...

MINI-H7RG-WV6V-MJFP

Bulletin has no description...

MINI-9P28-VC6G-CJRR

Bulletin has no description...

CGA-FR89-RM6F-PMG5

Bulletin has no description...

GHSA-8CFW-PCWH-V63W

creationtimestamp| type| source ---|---|--- 2026-08-21 19:32:14+00:00| seen| https://gist.github.com/alon710/5476f02ee350d0dd102b681b35e1425f...

CVE-2026-48752

Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image or instance backup can be used to read or create/write arbitrary files on the host; possibly leading to arbitrary command execution. Version 7.2.0 patches the issue...

ECHO-37EC-7E98-5F4F

Bulletin has no description...

CVE-2026-48756

Incus is a system container and virtual machine manager. Prior to version 7.1.0, backend.CreateCustomVolumeFromBackup in internal/server/storage/backend.go contains an unguarded time.Time dereference on the ExpiresAt field of every volume-snapshot entry in an imported custom-volume backup. An...